EP1389284A2 - Safety switching module and method for testing the switching-off ability of a switching element in a safety switching module - Google Patents

Safety switching module and method for testing the switching-off ability of a switching element in a safety switching module

Info

Publication number
EP1389284A2
EP1389284A2 EP02716833A EP02716833A EP1389284A2 EP 1389284 A2 EP1389284 A2 EP 1389284A2 EP 02716833 A EP02716833 A EP 02716833A EP 02716833 A EP02716833 A EP 02716833A EP 1389284 A2 EP1389284 A2 EP 1389284A2
Authority
EP
European Patent Office
Prior art keywords
switching
switching element
control device
safety
load
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
EP02716833A
Other languages
German (de)
French (fr)
Other versions
EP1389284B1 (en
Inventor
Richard Veil
Jürgen FLEINER
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Pilz GmbH and Co KG
Original Assignee
Pilz GmbH and Co KG
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Family has litigation
First worldwide family litigation filed litigation Critical https://patents.darts-ip.com/?family=7687234&utm_source=google_patent&utm_medium=platform_link&utm_campaign=public_patent_search&patent=EP1389284(A2) "Global patent litigation dataset” by Darts-ip is licensed under a Creative Commons Attribution 4.0 International License.
Application filed by Pilz GmbH and Co KG filed Critical Pilz GmbH and Co KG
Publication of EP1389284A2 publication Critical patent/EP1389284A2/en
Application granted granted Critical
Publication of EP1389284B1 publication Critical patent/EP1389284B1/en
Anticipated expiration legal-status Critical
Expired - Lifetime legal-status Critical Current

Links

Classifications

    • H—ELECTRICITY
    • H01—ELECTRIC ELEMENTS
    • H01H—ELECTRIC SWITCHES; RELAYS; SELECTORS; EMERGENCY PROTECTIVE DEVICES
    • H01H9/00—Details of switching devices, not covered by groups H01H1/00 - H01H7/00
    • H01H9/54—Circuit arrangements not adapted to a particular application of the switching device and for which no provision exists elsewhere
    • H01H9/548—Electromechanical and static switch connected in series
    • F—MECHANICAL ENGINEERING; LIGHTING; HEATING; WEAPONS; BLASTING
    • F16—ENGINEERING ELEMENTS AND UNITS; GENERAL MEASURES FOR PRODUCING AND MAINTAINING EFFECTIVE FUNCTIONING OF MACHINES OR INSTALLATIONS; THERMAL INSULATION IN GENERAL
    • F16P—SAFETY DEVICES IN GENERAL; SAFETY DEVICES FOR PRESSES
    • F16P3/00—Safety devices acting in conjunction with the control or operation of a machine; Control arrangements requiring the simultaneous use of two or more parts of the body
    • H—ELECTRICITY
    • H01—ELECTRIC ELEMENTS
    • H01H—ELECTRIC SWITCHES; RELAYS; SELECTORS; EMERGENCY PROTECTIVE DEVICES
    • H01H47/00—Circuit arrangements not adapted to a particular application of the relay and designed to obtain desired operating characteristics or to provide energising current
    • H01H47/002—Monitoring or fail-safe circuits
    • H01H47/004—Monitoring or fail-safe circuits using plural redundant serial connected relay operated contacts in controlled circuit
    • H—ELECTRICITY
    • H03—ELECTRONIC CIRCUITRY
    • H03K—PULSE TECHNIQUE
    • H03K17/00—Electronic switching or gating, i.e. not by contact-making and –breaking
    • H03K17/18—Modifications for indicating state of switch

Definitions

  • the present invention relates to a safety switching module for safely switching off an electrical load, with a first and a second switching control device, a first and a second switching element arranged in series therewith, which form a first current path for supplying the load, the first switching element being provided by the first switching control device and the second switching element can be controlled by the second switching control device, and an evaluation and control unit for testing the breaking capacity of at least one switching element.
  • the invention also relates to a method for testing the breaking capacity of a switching element in such a safety switching module.
  • safety switching modules or safety switching devices are generally known.
  • the applicant offers various types of safety switching devices under the name "PNOZ”.
  • PNOZ safety switching device
  • Such a safety switching device is disclosed, for example, in the applicant's patent application DE 100 11 211.
  • safety switching devices of this type are used above all in the industrial sector in order to switch on and switch off electrically driven machines, such as, for example, a press or a milling tool, a valve terminal for pneumatic or hydraulic controls or output modules of a PLC.
  • a mechanically operated emergency stop button they are used to switch off the machine quickly and safely in an emergency situation.
  • the power supply to the machine to be switched off is routed via two switching elements connected in series. As soon as even one of the two switching elements opens, the power supply to the machine is interrupted.
  • an evaluation and control unit which briefly switches off the switching elements individually and thereby detects and evaluates the output signal (read-back signal) of the switching elements.
  • the evaluation and control unit can determine whether each switching element is able to supply the machine with electrical power, i.e. generally interrupt the electrical load in an emergency situation.
  • the switching element is only switched off for a very short period of time, which is not "visible" for the load.
  • the object of the present invention is to provide a safety switching module of the aforementioned type which enables the switching capacity of the switching elements to be checked in a simple manner even with large currents to be switched and / or capacitive or inductive loads.
  • a third and a fourth switching element are provided, which are arranged in series with one another and parallel to the series circuit comprising the first and second switching elements and form a second current path, the third switching element being of the the first switching control device and the fourth switching element can be controlled by the second switching control device, and that the evaluation and control unit carries out the testing of both switching elements in alternating one of the two current paths, so that the other of the two current paths then supplies the load.
  • the load is supplied with electrical energy via both current paths.
  • one of the two current paths is tested for its breaking capacity, while the other current path then takes over the electrical supply alone. It is thus possible to continue to test the disconnection capacity by reading back output signals of these switching elements by briefly switching off the switching elements, without this hindering the supply of the electrical load. Consequently, a safety switching module for safely switching off even large currents can be constructed using simple means.
  • switch-off pulse is not applied to the load, longer switch-off pulses are possible. This means that with the structure according to the invention, in addition to semiconductor components, electromechanical switching elements can also be tested while the load is switched on.
  • Another advantage of the construction according to the invention can also be seen in the fact that the security of supply is increased, since if a current path fails, for example due to an alloyed semiconductor switching element with appropriate control, a reliable supply of the load is still possible.
  • the first and the third switching element is designed as a semiconductor switching element.
  • the second and fourth switching elements are preferably designed as electromechanical switching elements, preferably as relays. These measures have the advantage that, for example, the relay contacts do not have to switch the current in normal operation, since the semiconductor switching element switches faster and has already switched off the current. This protects the relay contacts and significantly increases the service life. Due to the use of diverse switching elements (semiconductors and relays), errors in both switching elements can be ruled out by the same causes, for example by a high-energy interference pulse. Of course, it is also conceivable to design all four switching elements as semiconductor switching elements, as AC switching semiconductor switching elements, preferably photo MOS relays, or as relays
  • the switching control device is designed with two channels.
  • This measure has the advantage that the security of the safety switching module is further increased.
  • the evaluation and control unit is connected to each of the two current paths in such a way that it can read out a signal between the first and the second or the third and the fourth switching element.
  • This measure has the advantage that the evaluation and control unit can detect the switch-off capacity of both switching elements in the respective current path.
  • the evaluation and control unit is designed such that it generates a short switch-off pulse and either the first or the third Can supply switching element to turn it off briefly.
  • This switch-off pulse is preferably modulated onto the control signal generated by the switching control device.
  • the object on which the invention is based is also achieved by a method for testing the breaking capacity of a switching element in a safety switching module, which is used for safely switching off an electrical load, and comprising the steps of: providing a first current path for supplying the load, at least in the current path a switching element is provided for safe switching off, provision of a second current path parallel to the first current path for supplying the load, at least one switching element being provided in the second current path, and alternately checking the breaking capacity of one of the two current paths, the other not in this test phase tested current path takes over this supply of the load alone.
  • This method for checking the breaking capacity also has the aforementioned advantages, so that it does not have to be discussed again.
  • FIG. 1A shows a schematic illustration of a safety switching device according to a first embodiment
  • FIG. 1B shows a schematic illustration of a safety switching device according to a second embodiment
  • FIG. 2 shows a schematic circuit diagram of the safety switching module according to the invention in a single-pole embodiment
  • Fig. 3 is a schematic circuit diagram of the safety switching module according to the invention in a two-pole version.
  • a safety switching device is shown in a schematic illustration in FIG. 1A and is identified by reference number 10.
  • the safety switching device 10 comprises a schematically indicated safe evaluation and control unit 12.
  • This evaluation and control unit 12 is constructed from known components, as are also used in the aforementioned safety switching device "PNOZ" by the applicant.
  • the task of this evaluation and control unit is to reliably evaluate switching signals supplied, for example from an emergency stop switch 14, and to generate corresponding output signals.
  • the evaluation and control unit 12 is constructed in the embodiment shown two channels, the two channels are identified by the reference symbols 16a and 16b. Of course, other configurations of the evaluation and control unit 12 are also possible. For a more detailed explanation of such an evaluation and control unit 12, reference is made, for example, to the book “Machine Safety”, Winfried Graf, Hüthig-Verlag, 1997.
  • the safety switching device 10 further comprises a control device (switching control device) 20A or 20B per channel, each of which receives a control signal from the corresponding evaluation and control unit 16a or 16b via lines 22. Although only one line is shown in each case for the lines 22 in FIG. 1A, the lines 22 can also be multi-core bus lines.
  • the control device 20 Depending on the control signals supplied, the control device 20 generates control signals from the evaluation and control unit 12, which are supplied to switching elements 24.1 to 24.4.
  • 1A shows that the control device 20A generates two control signals which are supplied to the two switching elements 24.1 and 24.3.
  • the control device 20B also generates two control signals, which, however, are supplied to the two switching elements 24.2 and 24.4.
  • the two control signals generated by the control device 20A and 20B are each the same, so that in normal operation of the safety switching device 10 the switching element pairs 24.1 and 24.3 or 24.2 and 24.4 have the same switching state.
  • the total of four switching elements 24.1 to 24.4 are arranged so that two identical current paths 26.1 and 26.2 are formed.
  • the two switching elements elements 24.1 and 24.2 connected in series so that they form the first current path 26.1, while the other two switching elements 24.3 and 24.4 are also connected in series and form the second current path 26.2.
  • 1A clearly shows that the two current paths 26.1, 26.2 are parallel to one another.
  • the two current paths 26.1, 26.2 connect an input connection 30 of the safety switching device 10 to an output connection 33.
  • switching elements 24 are switched on, an ohmic connection is thus created between the input connection 30 and the output connection 33, a corresponding current being able to flow via both current paths 26.
  • the safety switching device 10 has a further output connection 35 and a further input connection 37. 1A that there is an electrical connection between the input terminal 37 and the output terminal 35.
  • a DC voltage source 41 is connected to the two input connections 30, 37, which, for example, provides a voltage of 24 volts between the two connections 30, 37, with the input connection 30 at a positive potential and the input connection 37 at a reference potential, e.g. 0 volts.
  • the load to be switched by the safety switching device 10 is shown schematically in FIG. 1A and identified by the reference symbol 43.
  • it is a load of high power, for example valve terminals for pneumatic or hydraulic controls, or output modules of a PLC control which requires a current> 8 amperes.
  • the load 43 is connected between the output terminals 33 and 35. It follows from this that when the switching elements 24 are switched on, there is a current flow from the DC voltage source 41 via the input connection 30, the two current paths 26.1, 26.2, the output connection 33, the load 43, the output connection 35, and the input connection 37 back to the DC voltage source 41.
  • the evaluation and control unit 12 If, for example, the emergency stop switch 14 is now actuated, the evaluation and control unit 12 generates control signals which are converted into corresponding control signals by the two control devices 20A, 20B. These control signals cause the switching elements 24 to be switched off in order to disconnect the two current paths 26.1, 26.2. The load 43 is thus separated from the DC voltage source 41.
  • the switch-off capacity of the switching elements is now tested by switching off the two switching elements in one current path for a short period of time, while the switching elements in the other current path maintain their switching state.
  • the brief switching off of the switching elements in a current path means that the potential between the two tested switching elements changes if the switching elements are OK. This change in potential can affect the evaluation and control recognize unit 12 and evaluate accordingly. If, for example, the switching element 24.1 in the first current path 26.1 can no longer be opened, the potential does not change during the short test phase, which the evaluation and control unit 12 recognizes as an error. The result would be an immediate shutdown of the entire safety switching device and thus also the load 43.
  • FIG. 1A shows connections shown in dashed lines which run from the two evaluation and control units 16A, B to the control devices 20A, B and from the readback lines to the evaluation and control units 16A, B. These connections serve to continue the two-channel structure of the safety relay; these connections enable each evaluation and control unit 16A, B to control and check all four switching elements 24.1-24.4.
  • FIG. 1B shows a safety switching device 10 ′ which corresponds in terms of function to the safety switching device 10 already shown with reference to FIG. 1A. A detailed description is therefore not to be repeated here.
  • the constructive structure of the safety The safety switching device 10 'does not differ from that of the safety switching device 10. The only difference is that the safety switching device 10' has been divided into two modules 50, 51.
  • the module 50 which is referred to below as a safety switching module, comprises the control devices 20A, 20B and the switching elements 24 which are arranged in the two current paths 26.1, 26.2.
  • the module 51 which is referred to below as an evaluation and control module, comprises the evaluation and control unit 12, the control signals of which can be fed to input connections 53 of the safety switching module 50.
  • the flexibility can be increased by dividing the safety switching device 10 'into two individual modules 50, 51.
  • the safety switching module 50 can be connected to existing safety switching devices as an additional module for switching large currents.
  • FIG. 2 a specific preferred embodiment of the safety switching module 50 is now to be shown below, although it should be noted at this point that this is a purely exemplary circuit arrangement. To achieve the mode of operation described with reference to FIG. 1A, other circuit arrangements are of course also conceivable.
  • control device 20A comprises two control units 61, 62 which, depending on corresponding input signals, each generate an output signal which is fed to an optocoupler 63 and 64, respectively.
  • the outputs of the two optocouplers 63, 64 are connected in series and serve to control the switching element 24.1.
  • the control input of the switching element 24.1 is connected to a positive potential via the outputs of the optocouplers 63, 64.
  • the switching element 24.1 is designed as a semiconductor switching element, preferably as a field effect transistor 71.
  • the second switching element 24.2 is formed in the same current path 26.1 as an electromechanical switching element, preferably as a relay 73.
  • This relay 73 is controlled via corresponding control units 61, 62. Since the relay 73 itself creates electrical isolation from the control device 20B, the use of optocouplers 63, 64 can be dispensed with.
  • the field-effect transistor 71 and the relay 73 are controlled via two channels. Only if both control units 61, 62 have a corresponding generate the control signal, the switching element 24.1, 24.2 is closed.
  • the evaluation and control unit 12 checks the switch-off capacity of the switching elements 24 by briefly switching off the switching elements of a current path
  • a signal is tapped between the two switching elements 24.1, 24.2 via line 45 and fed to an optocoupler 83.
  • This optocoupler 83 generates a readback signal which is fed to the evaluation and control unit 12.
  • This read-back signal provides information as to whether the FET 71 and the contact 73 switch off during the test phase. If both switching elements 71 and 73 do this, safety is guaranteed; if they do not, however, the FET 71 or the contact 73 is faulty, with the result that the entire safety switching module 50 must be switched off, so that the load 43 is brought into the safe state.
  • the structure of the second current path 26.2 corresponds exactly to that of the current path 26.1, so that a repeated description can be omitted here.
  • some elements have been combined to form a function block, for example the two control units 61, 62 and the clock generator 81.
  • the breaking capacity of the FET 71 and the contact 24.4 is also carried out by modulating a short switching-off pulse on the control signal.
  • a corresponding readback signal is then generated via an optocoupler 83. It is essential in carrying out the tests of the switching elements that only one current path is ever tested, so that the other current path in each case can guarantee a corresponding uninterrupted power supply to the load 43 even during the test phase.
  • the switching elements of a current path are of diverse design. This means that errors in a current path due to the same causes can be excluded.
  • the same switching elements in particular semiconductor switching elements or electromechanical switching elements, can of course also be used in a current path.
  • FIG. 3 A further exemplary embodiment of a safety switching module is shown in FIG. 3 and identified by the reference symbol 50 ".
  • the difference from the safety switching module 50 shown in FIG. 2 is that it is a two-pole version of a safety switching module. That is, the load 43 between two safety switching modules 50, as shown in Fig. 2.
  • the connection between the connection 35 and the connection 37 is thus not direct, but also via two current paths 26.3 and 26.4, which are arranged in an interchanged arrangement with the two current paths 26.1 and 26.2
  • the mode of operation corresponds to the safety switching module 50, as was shown and described in FIG. 2, so that a further description can be dispensed with.
  • the circuit arrangement according to the invention enables interruptions of the switching elements that last longer than the switch-off reaction time of the load. This also makes it possible to test relays during operation.

Abstract

A safety switching module for safely switching-off an electrical load ( 43 ), comprising a first and a second switching control device ( 20 A, 20 B); a first and a second switching element ( 24.1, 24.2 ) both being series-connected with each other and forming a first current path ( 26.1 ) for supplying the load, whereby the first switching element ( 24.1 ) can be controlled by the first switching control device ( 20 A) and the second switching element ( 24.2 ) can be controlled by the second switching control device ( 20 B); and an evaluation and control device ( 12 ) for testing the switching-off ability of at least one switching element. A third and a fourth switching element ( 24.3, 24.4 ) are provided which are connected to each other in series, are connected in parallel to the series connection consisting of the first and second switching elements ( 24.1, 24.2 ) and form a second current path ( 26.2 ), the third switching element ( 24.3 ) being controlled by the first switching control device ( 20 A) and the fourth switching element ( 24.4 ) being controlled by the second switching control device ( 20 B). Further, the evaluation and control device ( 12 ) carries out the test of the switching elements by alternating in one of both current paths ( 26.1, 26.2 ) so that the other of both current paths supplies the load ( 43 ).

Description

Sicherheitsschaltmodul und Verfahren zur Prüfung des Abschalt- vermögens eines Schaltelements in einem Sicherheitsschaltmodul Safety switching module and method for testing the breaking capacity of a switching element in a safety switching module
Die vorliegende Erfindung betrifft ein Sicherheitsschaltmodul zum sicheren Abschalten einer elektrischen Last, mit einer ersten und einer zweiten Schaltsteuereinrichtung, einem ersten und einem in Reihe dazu angeordneten zweiten Schaltelement, die einen ersten Strompfad zur Versorgung der Last bilden, wobei das erste Schaltelement von der ersten Schaltsteuereinrichtung und das zweite Schaltelement von der zweiten Schaltsteuereinrichtung steuerbar ist, und einer Auswerte- und Steuereinheit zur Prüfung des Abschaltvermögens von zumindest einem Schaltelement. Die Erfindung betrifft darüber hinaus ein Verfahren zur Prüfung des Abschaltvermögens eines Schaltelements in einem solchen Sicherheitsschaltmodul.The present invention relates to a safety switching module for safely switching off an electrical load, with a first and a second switching control device, a first and a second switching element arranged in series therewith, which form a first current path for supplying the load, the first switching element being provided by the first switching control device and the second switching element can be controlled by the second switching control device, and an evaluation and control unit for testing the breaking capacity of at least one switching element. The invention also relates to a method for testing the breaking capacity of a switching element in such a safety switching module.
Solche Sicherheitsschaltmodule bzw. Sicherheitsschaltgeräte sind allgemein bekannt. So bietet die Anmelderin bspw. Sicherheitsschaltgeräte in unterschiedlichen Varianten unter dem Namen "PNOZ" an. In der Patentanmeldung DE 100 11 211 der Anmelderin ist bspw. ein solches Sicherheitsschaltgerät offenbart. Allgemein werden derartige Sicherheitsschaltgeräte vor allem im industriellen Bereich verwendet, um elektrisch angetriebene Maschinen, wie bspw. eine Presse oder ein Fräswerkzeug, eine Ventilinsel für Pneumatik- oder Hydrauliksteuerungen oder Ausgangsmodule einer SPS, ein- und sicher auszuschalten. Sie dienen insbesondere in Verbindung mit einem mechanisch betätigbaren Not-Aus-Taster dazu, die Maschine in einer Notfallsituation schnell und sicher abzuschalten. Hierzu wird die Stromversorgung der abzuschaltenden Maschine über zwei in Reihe geschaltete Schaltelemente geführt. Sobald auch nur eines der beiden Schaltelemente öffnet, wird die Stromzuführung der Maschine unterbrochen.Such safety switching modules or safety switching devices are generally known. For example, the applicant offers various types of safety switching devices under the name "PNOZ". Such a safety switching device is disclosed, for example, in the applicant's patent application DE 100 11 211. In general, safety switching devices of this type are used above all in the industrial sector in order to switch on and switch off electrically driven machines, such as, for example, a press or a milling tool, a valve terminal for pneumatic or hydraulic controls or output modules of a PLC. In conjunction with a mechanically operated emergency stop button, they are used to switch off the machine quickly and safely in an emergency situation. For this purpose, the power supply to the machine to be switched off is routed via two switching elements connected in series. As soon as even one of the two switching elements opens, the power supply to the machine is interrupted.
Um im Betrieb eines solchen Sicherheitsschaltgeräts eine Überprüfung des Schaltvermögens der Schaltelemente durchzuführen, ist eine Auswerte- und Steuereinheit vorgesehen, die die Schaltelemente kurzzeitig einzeln abschaltet und dabei das Ausgangssignal (Rücklesesignal) der Schaltelemente erfaßt und auswertet. Anhand dieser Auswertung kann die Auswerte- und Steuereinheit feststellen, ob jedes Schaltelement in der Lage ist, die elektrische Versorgung der Maschine, d.h. allgemein der elektrischen Last in einer Notfallsituation zu unterbrechen. Um die elektrische Last durch diesen Prüfvorgang nicht zu beeinflussen, wird das Schaltelement nur für eine sehr kurze Zeitdauer abgeschaltet, die für die Last nicht "sichtbar" ist.In order to check the switching capacity of the switching elements during the operation of such a safety switching device, an evaluation and control unit is provided which briefly switches off the switching elements individually and thereby detects and evaluates the output signal (read-back signal) of the switching elements. On the basis of this evaluation, the evaluation and control unit can determine whether each switching element is able to supply the machine with electrical power, i.e. generally interrupt the electrical load in an emergency situation. In order not to influence the electrical load by this test procedure, the switching element is only switched off for a very short period of time, which is not "visible" for the load.
Aufgrund der Trägheit von elektromechanischen Schaltelementen ist dieser Prüfvorgang nur bei elektronischen Schaltelementen auf der Basis von Halbleiterbauelementen möglich. Übersteigt der von dem Schaltelement zu schaltende Strom jedoch einen bestimmten Wert (typischerweise etwa 8 Ampere) und handelt es sich bei der elektrischen Last nicht um einen reinen Ohmschen Verbraucher (kapazitive oder induktive Bestandteile), so ist der vorgenannte Prüfvorgang durch kurzes Abschalten der Schaltelemente nur mit großem zusätzlichen Bauteilaufwand möglich. Zum Auswerten des Ausgangssignals des Schaltelements müßte nämlich dann zunächst die Last entladen werden, um den Abschaltimpuls klein zu halten. Das kurzzeitige Entladen eines größeren Kondensators würde einen sehr großen Entladestrom erfordern. Um bspw. einen lmF-Kondensator in 200 μs um 25 V zu entladen, ist ein Entladestrom von 125 A erforderlichDue to the inertia of electromechanical switching elements, this test procedure is only possible with electronic switching elements based on semiconductor components. However, if the current to be switched by the switching element exceeds a certain value (typically about 8 amperes), this is the case If the electrical load is not a pure ohmic consumer (capacitive or inductive components), the aforementioned test procedure is only possible with a large additional component outlay by briefly switching off the switching elements. To evaluate the output signal of the switching element, the load would have to be discharged in order to keep the switch-off pulse small. Briefly discharging a larger capacitor would require a very large discharge current. In order to discharge an IMF capacitor by 25 V in 200 μs, for example, a discharge current of 125 A is required
Vor diesem Hintergrund besteht die Aufgabe der vorliegenden Erfindung darin, ein Sicherheitsschaltmodul der vorgenannten Art vorzusehen, das auf einfache Weise eine Prüfung des Abschaltvermögens der Schaltelemente auch bei großen zu schaltenden Strömen und/oder kapazitiven oder induktiven Lasten ermöglicht.Against this background, the object of the present invention is to provide a safety switching module of the aforementioned type which enables the switching capacity of the switching elements to be checked in a simple manner even with large currents to be switched and / or capacitive or inductive loads.
Diese Aufgabe wird bei dem Sicherheitsschaltmodul der vorgenannten Art dadurch gelöst, daß ein drittes und ein viertes Schaltelement vorgesehen sind, die in Reihe zueinander und parallel zu der Reihenschaltung aus erstem und zweitem Schaltelement angeordnet sind und einen zweiten Strompfad bilden, wobei das dritte Schaltelement von der ersten Schaltsteuereinrichtung und das vierte Schaltelement von der zweiten Schaltsteuereinrichtung steuerbar ist, und daß die Auswerte- und Steuereinheit die Prüfung beider Schaltelemente in abwechselnd einem der beiden Strompfade durchführt, so daß dann der andere der beiden Strompfade die Last versorgt.This object is achieved in the safety switching module of the aforementioned type in that a third and a fourth switching element are provided, which are arranged in series with one another and parallel to the series circuit comprising the first and second switching elements and form a second current path, the third switching element being of the the first switching control device and the fourth switching element can be controlled by the second switching control device, and that the evaluation and control unit carries out the testing of both switching elements in alternating one of the two current paths, so that the other of the two current paths then supplies the load.
Das heißt mit anderen Worten, daß zusätzlich zu dem bisherigen Strompfad, der durch die beiden Schaltelemente stromlos ge- schaltet werden kann, ein weiterer Strompfad mit zwei weiteren Schaltelementen parallel geschaltet wird. Im normalen Betrieb wird die Last über beide Strompfade mit elektrischer Energie versorgt. Während eines Prüfzyklus wird einer der beiden Strompfade auf sein Abschaltvermögen hin geprüft, während dann der andere Strompfad die elektrische Versorgung alleine übernimmt. Somit ist es möglich, weiterhin durch kurzes Abschalten der Schaltelemente eine Prüfung des Abschaltvermögens durch Rücklesen von Ausgangssignalen dieser Schaltelemente durchzuführen, ohne daß dies die Versorgung der elektrischen Last behindern würde. Folglich läßt sich mit einfachen Mitteln ein Sicherheitsschaltmodul zum sicheren Abschalten auch von großen Strömen aufbauen.In other words, this means that in addition to the current path which has been de-energized by the two switching elements, can be switched, another current path with two further switching elements is connected in parallel. In normal operation, the load is supplied with electrical energy via both current paths. During a test cycle, one of the two current paths is tested for its breaking capacity, while the other current path then takes over the electrical supply alone. It is thus possible to continue to test the disconnection capacity by reading back output signals of these switching elements by briefly switching off the switching elements, without this hindering the supply of the electrical load. Consequently, a safety switching module for safely switching off even large currents can be constructed using simple means.
Da der Abschaltimpuls an der Last nicht anliegt, sind längere Abschaltimpulse möglich. Das bedeutet, daß mit dem erfindungsgemäßen Aufbau neben Halbleiterbauelementen auch elektromecha- nische Schaltelemente getestet werden können, während die Last eingeschaltet ist.Since the switch-off pulse is not applied to the load, longer switch-off pulses are possible. This means that with the structure according to the invention, in addition to semiconductor components, electromechanical switching elements can also be tested while the load is switched on.
Ein weiterer Vorteil des erfindungsgemäßen Aufbaus ist auch darin zu sehen, daß die Versorgungssicherheit erhöht wird, da bei Ausfall eines Strompfads, bspw. aufgrund eines durchlegierten Halbleiter-Schaltelements bei entsprechender Ansteuerung, weiterhin eine sichere Versorgung der Last möglich ist.Another advantage of the construction according to the invention can also be seen in the fact that the security of supply is increased, since if a current path fails, for example due to an alloyed semiconductor switching element with appropriate control, a reliable supply of the load is still possible.
In einer vorteilhaften Weiterbildung der Erfindung ist das erste und das dritte Schaltelement als Halbleiter-Schaltelement ausgebildet. Vorzugsweise ist das zweite und das vierte Schaltelement als elektromechanisches Schaltelement, vorzugsweise als Relais ausgebildet. Diese Maßnahmen haben den Vorteil, daß bspw. die Relaiskontakte den Strom im Normalbetrieb nicht zu schalten brauchen, da das Halbleiter-Schaltelement schneller schaltet und den Strom bereits abgeschaltet hat. Damit werden die Relaiskontakte geschont und die Lebensdauer wesentlich erhöht. Aufgrund der Verwendung diversitärer Schaltelemente (Halbleiter und Relais) lassen sich Fehler in beiden Schaltelementen durch gleiche Ursachen, bspw. durch einen energiereichen Störimpuls, ausschließen. Selbstverständlich ist es auch denkbar, alle vier Schaltelemente gleich als Halbleiter-Schaltelemente, als wechselstromschaltende Halbleiter-Schaltelemente, vorzugsweise Photo- MOS-Relais, oder als Relais auszubildenIn an advantageous development of the invention, the first and the third switching element is designed as a semiconductor switching element. The second and fourth switching elements are preferably designed as electromechanical switching elements, preferably as relays. These measures have the advantage that, for example, the relay contacts do not have to switch the current in normal operation, since the semiconductor switching element switches faster and has already switched off the current. This protects the relay contacts and significantly increases the service life. Due to the use of diverse switching elements (semiconductors and relays), errors in both switching elements can be ruled out by the same causes, for example by a high-energy interference pulse. Of course, it is also conceivable to design all four switching elements as semiconductor switching elements, as AC switching semiconductor switching elements, preferably photo MOS relays, or as relays
In einer vorteilhaften Weiterbildung ist die Schaltsteuereinrichtung zweikanalig ausgebildet.In an advantageous development, the switching control device is designed with two channels.
Diese Maßnahme hat den Vorteil, daß die Sicherheit des Sicherheitsschaltmoduls weiter erhöht wird.This measure has the advantage that the security of the safety switching module is further increased.
In einer vorteilhaften Weiterbildung ist die Auswerte- und Steuereinheit mit jedem der beiden Strompfade derart verbunden, daß sie ein Signal zwischen dem ersten und dem zweiten bzw. dem dritten und dem vierten Schaltelement auslesen kann.In an advantageous development, the evaluation and control unit is connected to each of the two current paths in such a way that it can read out a signal between the first and the second or the third and the fourth switching element.
Diese Maßnahme hat den Vorteil, daß die Auswerte- und Steuereinheit das Abschaltvermögen beider Schaltelemente in dem jeweiligen Strompfad erfassen kann.This measure has the advantage that the evaluation and control unit can detect the switch-off capacity of both switching elements in the respective current path.
In einer vorteilhaften Weiterbildung ist die Auswerte- und Steuereinheit derart ausgebildet, daß sie einen kurzen Ausschaltimpuls erzeugen und entweder dem ersten oder dem dritten Schaltelement zuführen kann, um dieses kurz auszuschalten. Vorzugsweise wird dieser Ausschaltimpuls dem von der Schaltsteuereinrichtung erzeugten Steuersignal aufmoduliert .In an advantageous development, the evaluation and control unit is designed such that it generates a short switch-off pulse and either the first or the third Can supply switching element to turn it off briefly. This switch-off pulse is preferably modulated onto the control signal generated by the switching control device.
Diese Maßnahmen haben den Vorteil, daß ein sehr einfacher Aufbau zur Prüfung des Abschaltvermögens möglich wird.These measures have the advantage that a very simple structure for checking the breaking capacity is possible.
Die der Erfindung zugrunde liegende Aufgabe wird auch von einem Verfahren zur Prüfung des Abschaltvermögens eines Schaltelements in einem Sicherheitsschaltmodul gelöst, das dem sicheren Abschalten einer elektrischen Last dient, und die Schritte umfaßt: Bereitstellen eines ersten Strompfads zur Versorgung der Last, wobei in dem Strompfad zumindest ein Schaltelement zum sicheren Abschalten vorgesehen ist, Bereitstellen eines zweiten Strompfads parallel zu dem ersten Strompfad zur Versorgung der Last, wobei in dem zweiten Strompfad zumindest ein Schaltelement vorgesehen ist, und abwechselndes Prüfen des Abschaltvermögens einer der beiden Strompfade, wobei in dieser Prüfphase der andere nicht geprüfte Strompfad diese Versorgung der Last alleine übernimmt.The object on which the invention is based is also achieved by a method for testing the breaking capacity of a switching element in a safety switching module, which is used for safely switching off an electrical load, and comprising the steps of: providing a first current path for supplying the load, at least in the current path a switching element is provided for safe switching off, provision of a second current path parallel to the first current path for supplying the load, at least one switching element being provided in the second current path, and alternately checking the breaking capacity of one of the two current paths, the other not in this test phase tested current path takes over this supply of the load alone.
Dieses Verfahren zur Prüfung des Abschaltvermögens hat ebenfalls die vorgenannten Vorteile, so daß darauf nicht nochmals eingegangen werden muß.This method for checking the breaking capacity also has the aforementioned advantages, so that it does not have to be discussed again.
Es versteht sich, daß die vorstehend genannten und die nachstehend noch zu erläuternden Merkmale nicht nur in der jeweils angegebenen Kombination, sondern auch in anderen Kombinationen oder in Alleinstellung verwendbar sind, ohne den Rahmen der vorliegenden Erfindung zu verlassen. Ausführungsbeispiele der Erfindung sind in der Zeichnung dargestellt und werden in der nachfolgenden Beschreibung näher erläutert. Es zeigen:It goes without saying that the features mentioned above and those yet to be explained below can be used not only in the combination indicated in each case, but also in other combinations or on their own without departing from the scope of the present invention. Exemplary embodiments of the invention are shown in the drawing and are explained in more detail in the following description. Show it:
Fig. 1A eine schematische Darstellung eines Sicherheitsschaltgeräts gemäß einer ersten Ausführungsform;1A shows a schematic illustration of a safety switching device according to a first embodiment;
Fig. 1B eine schematische Darstellung eines Sicherheitsschaltgeräts gemäß einer zweiten Ausführungsform;1B shows a schematic illustration of a safety switching device according to a second embodiment;
Fig. 2 ein schematisches Schaltungsdiagramm des erfindungsgemäßen Sicherheitsschaltmoduls in einer einpoligen Ausführung; und2 shows a schematic circuit diagram of the safety switching module according to the invention in a single-pole embodiment; and
Fig. 3 ein schematisches Schaltungsdiagramm des erfindungsgemäßen Sicherheitsschaltmoduls in einer zweipoligen Ausführung.Fig. 3 is a schematic circuit diagram of the safety switching module according to the invention in a two-pole version.
In Fig. 1A ist in schematischer Darstellung ein Sicherheitsschaltgerät gezeigt und mit dem Bezugszeichen 10 gekennzeichnet. Das Sicherheitsschaltgerät 10 umfaßt eine schematisch angedeutete sichere Auswert- und Steuereinheit 12. Diese Auswert- und Steuereinheit 12 ist aus bekannten Bauelementen aufgebaut, wie sie auch in dem vorgenannten Sicherheitsschaltgerät "PNOZ" der Anmelderin verwendet werden. Die Aufgabe dieser Auswerte- und Steuereinheit besteht darin, zugeführte Schaltsignale, bspw. von einem Not-Aus-Schalter 14, sicher auszuwerten und entsprechende Ausgangssignale zu erzeugen.A safety switching device is shown in a schematic illustration in FIG. 1A and is identified by reference number 10. The safety switching device 10 comprises a schematically indicated safe evaluation and control unit 12. This evaluation and control unit 12 is constructed from known components, as are also used in the aforementioned safety switching device "PNOZ" by the applicant. The task of this evaluation and control unit is to reliably evaluate switching signals supplied, for example from an emergency stop switch 14, and to generate corresponding output signals.
Die Auswerte- und Steuereinheit 12 ist im gezeigten Ausführungsbeispiel zweikanalig aufgebaut, wobei die beiden Kanäle mit dem Bezugszeichen 16a und 16b gekennzeichnet sind. Selbstverständlich sind auch andere Ausgestaltungen der Auswerte- und Steuereinheit 12 möglich. Zur näheren Erläuterung einer solchen Auswerte- und Steuereinheit 12 wird bspw. auf das Buch "Maschinensicherheit", Winfried Graf, Hüthig-Verlag, 1997, Bezug genommen.The evaluation and control unit 12 is constructed in the embodiment shown two channels, the two channels are identified by the reference symbols 16a and 16b. Of course, other configurations of the evaluation and control unit 12 are also possible. For a more detailed explanation of such an evaluation and control unit 12, reference is made, for example, to the book "Machine Safety", Winfried Graf, Hüthig-Verlag, 1997.
Das Sicherheitsschaltgerät 10 umfaßt ferner pro Kanal eine An- steuereinrichtung (Schaltsteuereinrichtung) 20A bzw. 20B, die jeweils ein Steuersignal von der entsprechenden Auswerte- und Steuereinheit 16a bzw. 16b über Leitungen 22 empfangen. Obgleich in Fig. 1A für die Leitungen 22 jeweils nur eine Linie dargestellt ist, kann es sich bei den Leitungen 22 auch um mehradrige Busleitungen handeln.The safety switching device 10 further comprises a control device (switching control device) 20A or 20B per channel, each of which receives a control signal from the corresponding evaluation and control unit 16a or 16b via lines 22. Although only one line is shown in each case for the lines 22 in FIG. 1A, the lines 22 can also be multi-core bus lines.
Die Ansteuereinrichtung 20 erzeugt abhängig von den zugeführten Steuersignalen von der Auswerte- und Steuereinheit 12 Ansteuersignale, die Schaltelementen 24.1 bis 24.4 zugeführt werden. Die Fig. 1A läßt erkennen, daß die Ansteuereinrichtung 20A zwei Ansteuersignale erzeugt, die den beiden Schaltelementen 24.1 und 24.3 zugeführt werden. Die Ansteuereinrichtung 20B erzeugt ebenfalls zwei Ansteuersignale, die jedoch den beiden Schaltelementen 24.2 und 24.4 zugeführt werden. Die beiden von der Ansteuereinrichtung 20A bzw. 20B erzeugten Ansteuersignale sind jeweils gleich, so daß im normalen Betrieb des Sicherheitsschaltgeräts 10 die Schaltelementpaare 24.1 und 24.3 bzw. 24.2 und 24.4 den gleichen Schaltzustand haben.Depending on the control signals supplied, the control device 20 generates control signals from the evaluation and control unit 12, which are supplied to switching elements 24.1 to 24.4. 1A shows that the control device 20A generates two control signals which are supplied to the two switching elements 24.1 and 24.3. The control device 20B also generates two control signals, which, however, are supplied to the two switching elements 24.2 and 24.4. The two control signals generated by the control device 20A and 20B are each the same, so that in normal operation of the safety switching device 10 the switching element pairs 24.1 and 24.3 or 24.2 and 24.4 have the same switching state.
Erfindungsgemäß sind die insgesamt vier Schaltelemente 24.1 bis 24.4 so angeordnet, daß zwei identische Strompfade 26.1 und 26.2 gebildet werden. Insbesondere sind die beiden Schaltele- mente 24.1 und 24.2 in Reihe geschaltet, so daß sie den ersten Strompfad 26.1 bilden, während die anderen beiden Schaltelemente 24.3 und 24.4 ebenfalls in Reihe geschaltet sind und den zweiten Strompfad 26.2 bilden. Aus der Darstellung in Fig. 1A ergibt sich deutlich, daß die beiden Strompfade 26.1, 26.2 parallel zueinander liegen. Die beiden Strompfade 26.1, 26.2 verbinden einen Eingangsanschluß 30 des Sicherheitsschaltgeräts 10 mit einem Ausgangsanschluß 33. Bei eingeschalteten Schaltelementen 24 wird somit eine ohmsche Verbindung zwischen dem Eingangsanschluß 30 und dem Ausgangsanschluß 33 geschaffen, wobei ein entsprechender Strom über beide Strompfade 26 fließen kann.According to the invention, the total of four switching elements 24.1 to 24.4 are arranged so that two identical current paths 26.1 and 26.2 are formed. In particular, the two switching elements elements 24.1 and 24.2 connected in series so that they form the first current path 26.1, while the other two switching elements 24.3 and 24.4 are also connected in series and form the second current path 26.2. 1A clearly shows that the two current paths 26.1, 26.2 are parallel to one another. The two current paths 26.1, 26.2 connect an input connection 30 of the safety switching device 10 to an output connection 33. When switching elements 24 are switched on, an ohmic connection is thus created between the input connection 30 and the output connection 33, a corresponding current being able to flow via both current paths 26.
Neben dem Ausgangsanschluß 33 weist das Sicherheitsschaltgerät 10 einen weiteren Ausgangsanschluß 35 und einen weiteren Eingangsanschluß 37 auf. Aus der Fig. 1A ist ersichtlich, daß zwischen dem Eingangsanschluß 37 und dem Ausgangsanschluß 35 eine elektrische Verbindung besteht.In addition to the output connection 33, the safety switching device 10 has a further output connection 35 and a further input connection 37. 1A that there is an electrical connection between the input terminal 37 and the output terminal 35.
Im Betrieb wird an die beiden Eingangsanschlüsse 30, 37 eine Gleichspannungsquelle 41 angeschlossen, die bspw. eine Spannung von 24 Volt zwischen den beiden Anschlüssen 30, 37 bereitstellt, wobei der Eingangsanschluß 30 auf einem positiven Potential und der Eingangsanschluß 37 auf einem Bezugspotential, bspw. 0 Volt liegt.In operation, a DC voltage source 41 is connected to the two input connections 30, 37, which, for example, provides a voltage of 24 volts between the two connections 30, 37, with the input connection 30 at a positive potential and the input connection 37 at a reference potential, e.g. 0 volts.
Die von dem Sicherheitsschaltgerät 10 zu schaltende Last ist in Fig. 1A schematisch dargestellt und mit dem Bezugszeichen 43 gekennzeichnet. Im vorliegenden Ausführungsbeispiel handelt es sich um eine Last hoher Leistung, bspw. Ventilinseln für Pneumatik- oder Hydrauliksteuerungen, oder Ausgangsmodule einer SPS-Steuerung, die einen Strom > 8 Ampere benötigt. Die Last 43 ist zwischen den Ausgangsanschlüssen 33 und 35 angeschlossen. Daraus ergibt sich, daß sich bei eingeschalteten Schaltelementen 24 ein Stromfluß von der Gleichspannungsquelle 41 über den Eingangsanschluß 30, die beiden Strompfade 26.1, 26.2, den Ausgangsanschluß 33, die Last 43, den Ausgangsanschluß 35, und den Eingangsanschluß 37 zurück zur Gleichspannungsquelle 41 ergibt. Wird nun bspw. der Not-Aus-Schalter 14 betätigt, erzeugt die Auswerte- und Steuereinheit 12 Steuersignale, die von den beiden Ansteuereinrichtungen 20A, 20B in entsprechende Ansteuersignale umgewandelt werden. Diese Ansteuersignale verursachen ein Ausschalten der Schaltelemente 24, um die beiden Strompfade 26.1, 26.2 stromlos zu schalten. Damit wird die Last 43 von der Gleichspannungsquelle 41 getrennt.The load to be switched by the safety switching device 10 is shown schematically in FIG. 1A and identified by the reference symbol 43. In the present exemplary embodiment, it is a load of high power, for example valve terminals for pneumatic or hydraulic controls, or output modules of a PLC control which requires a current> 8 amperes. The load 43 is connected between the output terminals 33 and 35. It follows from this that when the switching elements 24 are switched on, there is a current flow from the DC voltage source 41 via the input connection 30, the two current paths 26.1, 26.2, the output connection 33, the load 43, the output connection 35, and the input connection 37 back to the DC voltage source 41. If, for example, the emergency stop switch 14 is now actuated, the evaluation and control unit 12 generates control signals which are converted into corresponding control signals by the two control devices 20A, 20B. These control signals cause the switching elements 24 to be switched off in order to disconnect the two current paths 26.1, 26.2. The load 43 is thus separated from the DC voltage source 41.
Bei derartigen Sicherheitsschaltgeräten 10 ist es erforderlich, das Abschaltvermögen der Schaltelemente 24 in regelmäßigen Abständen zu testen. Hierfür wird zwischen den beiden Schaltelementen 24.1 und 24.2 des ersten Strompfads 26.1 sowie zwischen den beiden Schaltelementen 24.3 und 24.4 des zweiten Strompfads 26.2 ein Signal abgegriffen und der Auswerte- und Steuereinheit 12 zugeführt. Dies ist in Fig. 1A durch die beiden mit dem Bezugszeichen 45 gekennzeichneten Pfeile angedeutet.In such safety switching devices 10, it is necessary to test the switch-off capacity of the switching elements 24 at regular intervals. For this purpose, a signal is tapped between the two switching elements 24.1 and 24.2 of the first current path 26.1 and between the two switching elements 24.3 and 24.4 of the second current path 26.2 and fed to the evaluation and control unit 12. This is indicated in FIG. 1A by the two arrows labeled 45.
Das Abschaltvermögen der Schaltelemente wird nun dadurch getestet, daß die beiden Schaltelemente in einem Strompfad für eine kurze Zeitdauer abgeschaltet werden, während die Schaltelemente in dem anderen Strompfad ihren Schaltzustand beibehalten. Das kurze Abschalten der Schaltelemente in einem Strompfad führt dazu, daß sich das Potential zwischen den beiden getesteten Schaltelementen verändert, sofern die Schaltelemente in Ordnung sind. Diese Potentialveränderung kann die Auswerte- und Steuer- einheit 12 erkennen und entsprechend auswerten. Sollte sich bspw. das Schaltelement 24.1 im ersten Strompfad 26.1 nicht mehr öffnen lassen, so verändert sich das Potential während der kurzen Testphase nicht, was von der Auswerte- und Steuereinheit 12 als Fehler erkannt wird. Eine sofortige Abschaltung des gesamten Sicherheitsschaltgeräts und damit auch der Last 43 wäre die Folge.The switch-off capacity of the switching elements is now tested by switching off the two switching elements in one current path for a short period of time, while the switching elements in the other current path maintain their switching state. The brief switching off of the switching elements in a current path means that the potential between the two tested switching elements changes if the switching elements are OK. This change in potential can affect the evaluation and control recognize unit 12 and evaluate accordingly. If, for example, the switching element 24.1 in the first current path 26.1 can no longer be opened, the potential does not change during the short test phase, which the evaluation and control unit 12 recognizes as an error. The result would be an immediate shutdown of the entire safety switching device and thus also the load 43.
Dadurch, daß zwei Strompfade 26.1, 26.2 vorgesehen sind, von denen jeweils nur einer einem Test unterzogen wird, wird eine gleichbleibende Energieversorgung der Last 43 auch während der Testphase garantiert. Somit ist es mit diesem Sicherheitsschaltgerät 10 möglich, das Abschaltvermögen von Schaltelementen zu testen, obgleich sehr große Ströme fließen. Darüber hinaus spielt es keine Rolle, ob die Last 43 eine rein ohmsche Last oder bspw. eine kapazitive Last ist.Because two current paths 26.1, 26.2 are provided, only one of which is subjected to a test, a constant power supply to the load 43 is guaranteed even during the test phase. It is thus possible with this safety switching device 10 to test the breaking capacity of switching elements, although very large currents flow. In addition, it does not matter whether the load 43 is a purely ohmic load or, for example, a capacitive load.
Fig. 1A läßt noch gestrichelt dargestellte Verbindungen erkennen, die von den beiden Auswerte- und Steuereinheiten 16A,B zu den Ansteuereinrichtungen 20A,B verlaufen und von den Rückleseleitungen zu den Auswerte- und Steuereinheiten 16A,B. Diese Verbindungen dienen dazu, die zweikanalige Struktur des Sicherheitsschaltgeräts fortzusetzen; diese Verbindungen ermöglichen es jeder Auswerte- und Steuereinheit 16A,B, alle vier Schaltelemente 24.1-24.4 anzusteuern und zu überprüfen.FIG. 1A shows connections shown in dashed lines which run from the two evaluation and control units 16A, B to the control devices 20A, B and from the readback lines to the evaluation and control units 16A, B. These connections serve to continue the two-channel structure of the safety relay; these connections enable each evaluation and control unit 16A, B to control and check all four switching elements 24.1-24.4.
In Fig. 1B ist ein Sicherheitsschaltgerät 10' gezeigt, das hinsichtlich der Funktion dem bereits mit Bezug auf die Fig. 1A gezeigten Sicherheitsschaltgerät 10 entspricht. Auf eine nochmalige ausführliche Beschreibung soll deshalb an dieser Stelle verzichtet werden. Auch der konstruktive Aufbau des Sicher- heitsschaltgeräts 10' unterscheidet sich nicht von dem des Sicherheitsschaltgeräts 10. Der einzige Unterschied besteht darin, daß das Sicherheitsschaltgerät 10' in zwei Module 50, 51 aufgeteilt wurde. Das Modul 50, das nachfolgend als Sicherheitsschaltmodul bezeichnet wird, umfaßt die Ansteuereinrichtungen 20A, 20B sowie die Schaltelemente 24, die in den beiden Strompfaden 26.1, 26.2 angeordnet sind. Das Modul 51, das nachfolgend als Auswerte- und Steuermodul bezeichnet wird, umfaßt die Auswerte- und Steuereinheit 12, deren Steuersignale Eingangsanschlüssen 53 des Sicherheitsschaltmoduls 50 zuführbar sind. Durch die Aufgliederung des Sicherheitsschaltgeräts 10' in zwei einzelne Module 50, 51 läßt sich die Flexibilität steigern. Insbesondere kann das Sicherheitsschaltmodul 50 als Zusatzmodul zum Schalten großer Ströme an bereits existierende Sicherheitsschaltgeräte angeschlossen werden.FIG. 1B shows a safety switching device 10 ′ which corresponds in terms of function to the safety switching device 10 already shown with reference to FIG. 1A. A detailed description is therefore not to be repeated here. The constructive structure of the safety The safety switching device 10 'does not differ from that of the safety switching device 10. The only difference is that the safety switching device 10' has been divided into two modules 50, 51. The module 50, which is referred to below as a safety switching module, comprises the control devices 20A, 20B and the switching elements 24 which are arranged in the two current paths 26.1, 26.2. The module 51, which is referred to below as an evaluation and control module, comprises the evaluation and control unit 12, the control signals of which can be fed to input connections 53 of the safety switching module 50. The flexibility can be increased by dividing the safety switching device 10 'into two individual modules 50, 51. In particular, the safety switching module 50 can be connected to existing safety switching devices as an additional module for switching large currents.
Mit Bezug auf die Fig. 2 soll nun nachfolgend eine konkrete bevorzugte Ausgestaltung des Sicherheitsschaltmoduls 50 gezeigt werden, wobei an dieser Stelle jedoch anzumerken ist, daß es sich hierbei um eine rein beispielhafte Schaltungsanordnung handelt. Zur Erzielung der mit Bezug auf die Fig. 1A beschriebenen Funktionsweise sind selbstverständlich auch andere Schaltungsanordnungen denkbar.With reference to FIG. 2, a specific preferred embodiment of the safety switching module 50 is now to be shown below, although it should be noted at this point that this is a purely exemplary circuit arrangement. To achieve the mode of operation described with reference to FIG. 1A, other circuit arrangements are of course also conceivable.
Zur Vereinfachung sind in Fig. 2 für die gleichen Bauelemente gleiche Bezugszeichen angegeben, so daß auf eine nochmalige Beschreibung dieser Bauelemente verzichtet werden kann.For simplification, the same reference numerals are given in Fig. 2 for the same components, so that a repeated description of these components can be omitted.
Mit gestrichelten Linien sind die einzelnen Funktionsblöcke, nämlich die beiden Ansteuereinrichtungen 20A, 20B sowie die Schaltelemente 24.1 bis 24.4 dargestellt. Die Ansteuereinrichtung 20A umfaßt im vorliegenden Ausführungsbeispiel zwei Ansteuereinheiten 61, 62, die abhängig von entsprechenden Eingangssignalen jeweils ein Ausgangssignal erzeugen, das jeweils einem Optokoppler 63 bzw. 64 zugeführt wird. Die Ausgänge der beiden Optokoppler 63, 64 sind in Reihe geschaltet und dienen dazu, das Schaltelement 24.1 anzusteuern. Hierzu wird der Steuereingang des Schaltelements 24.1 über die Ausgänge der Optokoppler 63, 64 an ein positives Potential gelegt. Liegen entsprechende Steuersignale an den Eingängen der beiden Optokoppler 63, 64 an, werden die Ausgänge der beiden Optokoppler miteinander verbunden, so daß dann das Schaltelement 24.1 ein Ansteuersignal mit positivem Potential empfängt und aufgrund dessen schließt. Dies ist der normale Betriebsmodus des Sicherheitsschaltmoduls 50, um die Last 43 mit Energie zu versorgen.The individual function blocks, namely the two control devices 20A, 20B and the switching elements 24.1 to 24.4, are shown with dashed lines. In the present exemplary embodiment, the control device 20A comprises two control units 61, 62 which, depending on corresponding input signals, each generate an output signal which is fed to an optocoupler 63 and 64, respectively. The outputs of the two optocouplers 63, 64 are connected in series and serve to control the switching element 24.1. For this purpose, the control input of the switching element 24.1 is connected to a positive potential via the outputs of the optocouplers 63, 64. If corresponding control signals are present at the inputs of the two optocouplers 63, 64, the outputs of the two optocouplers are connected to one another, so that the switching element 24.1 then receives a control signal with positive potential and closes on the basis of this. This is the normal mode of operation of the safety switch module 50 to power the load 43.
Im vorliegenden Ausführungsbeispiel ist das Schaltelement 24.1 als Halbleiter-Schaltelement, vorzugsweise als Feldeffekttransistor 71 ausgebildet.In the present exemplary embodiment, the switching element 24.1 is designed as a semiconductor switching element, preferably as a field effect transistor 71.
Im Gegensatz dazu ist das zweite Schaltelement 24.2 im gleichen Strompfad 26.1 als elektromechanisches Schaltelement, vorzugsweise als Relais 73 ausgebildet. Dieses Relais 73 wird über entsprechende Ansteuereinheiten 61, 62 gesteuert. Da das Relais 73 selbst eine galvanische Trennung zu der Ansteuereinrichtung 20B schafft, kann auf den Einsatz von Optokopplern 63, 64 verzichtet werden.In contrast, the second switching element 24.2 is formed in the same current path 26.1 as an electromechanical switching element, preferably as a relay 73. This relay 73 is controlled via corresponding control units 61, 62. Since the relay 73 itself creates electrical isolation from the control device 20B, the use of optocouplers 63, 64 can be dispensed with.
In beiden Fällen ist jedoch anzumerken, daß die Ansteuerung des Feldeffekttransistors 71 bzw. des Relais 73 zweikanalig erfolgt. Nur wenn beide Ansteuereinheiten 61, 62 ein entsprechen- des Ansteuersignal erzeugen, wird das Schaltelement 24.1, 24.2 geschlossen.In both cases, however, it should be noted that the field-effect transistor 71 and the relay 73 are controlled via two channels. Only if both control units 61, 62 have a corresponding generate the control signal, the switching element 24.1, 24.2 is closed.
Die Auswerte- und Steuereinheit 12 prüft das Abschaltvermögen der Schaltelemente 24 durch kurzzeitiges Abschalten der Schaltelemente eines StrompfadesThe evaluation and control unit 12 checks the switch-off capacity of the switching elements 24 by briefly switching off the switching elements of a current path
Zur Prüfung des Abschaltvermögens des FET 71 und des Kontakts 73 wird über die Leitung 45 ein Signal zwischen den beiden Schaltelementen 24.1, 24.2 abgegriffen und einem Optokoppler 83 zugeführt. Dieser Optokoppler 83 erzeugt ein Rücklesesignal, das der Auswerte- und Steuereinheit 12 zugeführt wird. Dieses Rücklesesignal gibt Aufschluß darüber, ob während der Testphase der FET 71 und der Kontakt 73 abschaltet. Tun dies beide Schaltelemente 71 und 73, ist die Sicherheit gewährleistet; tun sie dies jedoch nicht, ist der FET 71 oder der Kontakt 73 fehlerhaft mit der Folge, daß das gesamte Sicherheitsschaltmodul 50 abgeschaltet werden muß, so daß die Last 43 in den sicheren Zustand gebracht wird.To test the breaking capacity of the FET 71 and the contact 73, a signal is tapped between the two switching elements 24.1, 24.2 via line 45 and fed to an optocoupler 83. This optocoupler 83 generates a readback signal which is fed to the evaluation and control unit 12. This read-back signal provides information as to whether the FET 71 and the contact 73 switch off during the test phase. If both switching elements 71 and 73 do this, safety is guaranteed; if they do not, however, the FET 71 or the contact 73 is faulty, with the result that the entire safety switching module 50 must be switched off, so that the load 43 is brought into the safe state.
Der Aufbau des zweiten Strompfads 26.2 entspricht exakt demjenigen des Strompfads 26.1, so daß auf eine nochmalige Beschreibung an dieser Stelle verzichtet werden kann. Der Übersichtlichkeit wegen sind einige Elemente zu einem Funktionsblock zusammengefaßt worden, bspw. die beiden Ansteuereinheiten 61, 62 und der Taktgenerator 81. Auch im zweiten Strompfad 26.2 wird das Abschaltvermögen des FET 71 und des Kontakts 24.4 durch Aufmodulieren eines kurzen Abschaltimpulses auf das Ansteuersignal durchgeführt. Über einen Optokoppler 83 wird dann ein entsprechendes Rücklesesignal erzeugt. Wesentlich an der Durchführung der Tests der Schaltelemente ist, daß immer nur ein Strompfad getestet wird, so daß der jeweils andere Strompfad eine entsprechende ununterbrochene Energieversorgung der Last 43 auch während der Testphase garantieren kann.The structure of the second current path 26.2 corresponds exactly to that of the current path 26.1, so that a repeated description can be omitted here. For the sake of clarity, some elements have been combined to form a function block, for example the two control units 61, 62 and the clock generator 81. In the second current path 26.2, the breaking capacity of the FET 71 and the contact 24.4 is also carried out by modulating a short switching-off pulse on the control signal. A corresponding readback signal is then generated via an optocoupler 83. It is essential in carrying out the tests of the switching elements that only one current path is ever tested, so that the other current path in each case can guarantee a corresponding uninterrupted power supply to the load 43 even during the test phase.
In dem in Fig. 2 gezeigten Ausführungsbeispiel sind die Schaltelemente eines Strompfads diversitär ausgebildet. Damit sind Fehler in einem Strompfad aufgrund gleicher Ursachen ausschließbar. Selbstverständlich können neben dieser bevorzugten Ausführungsform in einem Strompfad auch gleiche Schaltelemente, insbesondere Halbleiter-Schaltelemente oder elektromechanische Schaltelemente eingesetzt werden.In the exemplary embodiment shown in FIG. 2, the switching elements of a current path are of diverse design. This means that errors in a current path due to the same causes can be excluded. In addition to this preferred embodiment, the same switching elements, in particular semiconductor switching elements or electromechanical switching elements, can of course also be used in a current path.
Ein weiteres Ausführungsbeispiel eines Sicherheitsschaltmoduls ist in Fig. 3 gezeigt und mit dem Bezugszeichen 50" gekennzeichnet. Der Unterschied zu dem in Fig. 2 gezeigten Sicherheitsschaltmodul 50 besteht darin, daß es sich um eine zweipolige Ausführung eines Sicherheitsschaltmoduls handelt. D.h., daß die Last 43 zwischen zwei Sicherheitsschaltmodulen 50, wie in Fig. 2 dargestellt, liegt. Die Verbindung zwischen dem Anschluß 35 und dem Anschluß 37 erfolgt somit nicht direkt, sondern ebenfalls über zwei Strompfade 26.3 und 26.4, die in vertauschter Anordnung zu den beiden Strompfaden 26.1 und 26.2 aufgebaut sind. Die Funktionsweise entspricht jedoch dem Sicherheitsschaltmodul 50, wie es in Fig. 2 gezeigt und beschrieben wurde, so daß auf eine nochmalige Beschreibung verzichtet werden kann.A further exemplary embodiment of a safety switching module is shown in FIG. 3 and identified by the reference symbol 50 ". The difference from the safety switching module 50 shown in FIG. 2 is that it is a two-pole version of a safety switching module. That is, the load 43 between two safety switching modules 50, as shown in Fig. 2. The connection between the connection 35 and the connection 37 is thus not direct, but also via two current paths 26.3 and 26.4, which are arranged in an interchanged arrangement with the two current paths 26.1 and 26.2 However, the mode of operation corresponds to the safety switching module 50, as was shown and described in FIG. 2, so that a further description can be dispensed with.
Der Vorteil ist, daß die Last auch bei einem 24V-Kurzschluß noch sicher abgeschaltet werden kann. Zusammenfassend ist also festzustellen, daß das erfindungsgemäße Vorsehen zweier Strompfade, die abwechselnd getestet werden, auch ein Schalten hoher Ströme zuläßt, ohne auf eine Prüfung des Abschaltvermögens der Schaltelemente verzichten zu müssen oder hierfür komplizierte PrüfSchaltungen schaffen zu müssen, die eventuell auf die jeweilige Last angepaßt werden müssen.The advantage is that the load can still be safely switched off in the event of a 24V short circuit. In summary, it can be stated that the provision of two current paths according to the invention, which are tested alternately, also permits switching of high currents without having to do without testing the breaking capacity of the switching elements or having to create complicated test circuits for this, which may be adapted to the respective load Need to become.
Durch die erfindungsgemäße Schaltungsanordnung sind Unterbrechungen der Schaltelemente möglich, die länger dauern als die Abschaltreaktionszeit der Last. Damit ist auch der Test von Relais während des Betriebs möglich. The circuit arrangement according to the invention enables interruptions of the switching elements that last longer than the switch-off reaction time of the load. This also makes it possible to test relays during operation.

Claims

Patentansprüche claims
Sicherheitsschaltmodul zum sicheren Abschalten einer elektrischen Last (43), mit einer ersten und einer zweiten Schaltsteuereinrichtung (20A, 20B) , einem ersten und einem in Reihe dazu angeordneten zweiten Schaltelement (24.1, 24.2), die einen ersten Strompfad (26.1) zur Versorgung der Last bilden, wobei das erste Schaltelement (24.1) von der ersten Schaltsteuereinrichtung (20A) und das zweite Schaltelement (24.2) von der zweiten Schaltsteuereinrichtung (2OB) steuerbar ist, und mit einer Auswerte- und Steuereinrichtung (12) zur Prüfung des Abschaltvermögens von zumindest einem Schaltelement, dadurch gekennzeichnet, daß ein drittes und ein viertes Schaltelement (24.3, 24.4) vorgesehen sind, die in Reihe zueinander und parallel zu der Reihenschaltung aus erstem und zweitem Schaltelement (24.1, 24.2) angeordnet sind und einen zweiten Strompfad (26.2) bilden, wobei das dritte Schaltelement (24.3) von der ersten Schaltsteuereinrichtung (20A) und das vierte Schaltelement (24.4) von der zweiten Schaltsteuereinrichtung (2OB) steuerbar ist, und daß die Auswerte- und Steuereinrichtung (12) die Prüfung der Schaltelemente (24) in abwechselnd einem der beiden Strompfade (26.1, 26.2) durchführt, so daß der andere der beiden Strompfade (26.Safety switching module for safely switching off an electrical load (43), with a first and a second switching control device (20A, 20B), a first and a second switching element (24.1, 24.2) arranged in series therewith, which have a first current path (26.1) for supplying the Form a load, the first switching element (24.1) being controllable by the first switching control device (20A) and the second switching element (24.2) by the second switching control device (2OB), and with an evaluation and control device (12) for testing the breaking capacity of at least a switching element, characterized in that a third and a fourth switching element (24.3, 24.4) are provided, which are arranged in series with one another and parallel to the series connection of the first and second switching elements (24.1, 24.2) and form a second current path (26.2) , wherein the third switching element (24.3) from the first switching control device (20A) and the fourth switching element (24.4) from the z wide switching control device (2OB) is controllable, and that the evaluation and control device (12) carries out the test of the switching elements (24) in alternating one of the two current paths (26.1, 26.2), so that the other of the two current paths (26.
2, 26.1) die Last (43) versorgt.2, 26.1) supplies the load (43).
Sicherheitsschaltmodul nach Anspruch 1, dadurch gekennzeichnet, daß das erste und das dritte Schaltelement (24.1, 24.3) als Halbleiter-Schaltelemente (71) ausgebildet sind. Safety switching module according to claim 1, characterized in that the first and third switching elements (24.1, 24.3) are designed as semiconductor switching elements (71).
3. Sicherheitsschaltmodul nach Anspruch 1 oder 2, dadurch gekennzeichnet, daß das zweite und das vierte Schaltelement (24.2, 24.4) als elektromechanisches Schaltelement (73), vorzugsweise als Relais ausgebildet sind.3. Safety switching module according to claim 1 or 2, characterized in that the second and fourth switching element (24.2, 24.4) are designed as an electromechanical switching element (73), preferably as a relay.
4. Sicherheitsschaltmodul nach einem der vorhergehenden Ansprüche, dadurch gekennzeichnet, daß die Schaltsteuereinrichtungen (20A, 20B, 61, 62) zweikanalig ausgebildet sind.4. Safety switching module according to one of the preceding claims, characterized in that the switching control devices (20A, 20B, 61, 62) are designed with two channels.
5. Sicherheitsschaltmodul nach einem der vorhergehenden Ansprüche, dadurch gekennzeichnet, daß die Strompfade auf einer Seite mit einer Versorgungsspannung und auf der anderen Seite mit der Last verbunden sind.5. Safety switching module according to one of the preceding claims, characterized in that the current paths are connected on one side to a supply voltage and on the other side to the load.
6. Sicherheitsschaltmodul nach einem der vorhergehenden Ansprüche, dadurch gekennzeichnet, daß die Auswerte- und Steuereinrichtung (12, 83) mit jedem der beiden Strompfade (26.1, 26.2) zwischen dem ersten und dem zweiten (24.1, 24.2) bzw. dem dritten und dem vierten Schaltelement (24.3, 24.4) verbunden ist.6. Safety switching module according to one of the preceding claims, characterized in that the evaluation and control device (12, 83) with each of the two current paths (26.1, 26.2) between the first and the second (24.1, 24.2) or the third and the fourth switching element (24.3, 24.4) is connected.
7. Sicherheitsmodul nach einem der vorhergehenden Ansprüche, dadurch gekennzeichnet, daß die Auswerte- und Steuereinrichtung einen kurzen Ausschaltimpuls erzeugt und entweder dem ersten und dem zweiten Schaltelement (24.1, 24.2) oder dem dritten und vierten Schaltelement (24.3, 24.4) zuführt, um diese kurz auszuschalten. 7. Security module according to one of the preceding claims, characterized in that the evaluation and control device generates a short switch-off pulse and either the first and the second switching element (24.1, 24.2) or the third and fourth switching element (24.3, 24.4) to this turn off briefly.
8. Sicherheitsmodul nach Anspruch 6, dadurch gekennzeichnet, daß der Ausschaltimpuls dem Signal der Schaltsteuereinrichtung aufmoduliert wird.8. Security module according to claim 6, characterized in that the switch-off pulse is modulated onto the signal of the switching control device.
9. Sicherheitsmodul nach einem der vorhergehenden Ansprüche, dadurch gekennzeichnet, daß die Schaltelemente (24.1 - 24.4) elektromechanische Schaltelemente, vorzugsweise Relais, sind.9. Security module according to one of the preceding claims, characterized in that the switching elements (24.1 - 24.4) are electromechanical switching elements, preferably relays.
10. Sicherheitsmodul nach einem der Ansprüche 1 bis 7, dadurch gekennzeichnet, daß die Schaltelemente (24.1 - 24.4) Halbleiter-Schaltelemente sind10. Security module according to one of claims 1 to 7, characterized in that the switching elements (24.1 - 24.4) are semiconductor switching elements
11. Verfahren zur Prüfung des Abschaltvermögens eines Schaltelements in einem Sicherheitsschaltmodul, das dem sicheren Abschalten einer elektrischen Last dient, mit den Schritten:11. A method for testing the breaking capacity of a switching element in a safety switching module that is used to safely switch off an electrical load, with the steps:
- Bereitstellen eines ersten Strompfades (26.1) zur Versorgung der Last, in dem zumindest ein Schaltelement (24.1, 24.2) zur sicheren Abschaltung vorgesehen ist;- Providing a first current path (26.1) for supplying the load, in which at least one switching element (24.1, 24.2) is provided for safe shutdown;
- Bereitstellen eines zweiten Strompfades (26.2) parallel zu dem ersten Strompfad zur Versorgung der Last, wobei in dem zweiten Strompfad zumindest ein Schaltelement (24.3, 24.4) vorgesehen ist; und- providing a second current path (26.2) parallel to the first current path for supplying the load, at least one switching element (24.3, 24.4) being provided in the second current path; and
- abwechselndes Prüfen des Abschaltvermögens eines der beiden Strompfade (26.1, 26.2), wobei in dieser Prüfpha- se der andere nicht geprüfte Strompfad (26.2, 26.1) die Versorgung der Last alleine übernimmt. - alternately testing the breaking capacity of one of the two current paths (26.1, 26.2), in which test phase se the other non-tested current path (26.2, 26.1) takes care of the load alone.
EP02716833A 2001-05-22 2002-03-14 Safety switching module for testing the switching-off ability of a switching element in a safety switching module Expired - Lifetime EP1389284B1 (en)

Applications Claiming Priority (3)

Application Number Priority Date Filing Date Title
DE10127233 2001-05-22
DE10127233A DE10127233C1 (en) 2001-05-22 2001-05-22 Safety cut-out switch module for electrical load has 2 alternate load current paths for supplying electrical load each containing 2 series switch elements
PCT/EP2002/002840 WO2002095282A2 (en) 2001-05-22 2002-03-14 Safety switching module and method for testing the switching-off ability of a switching element in a safety switching module

Publications (2)

Publication Number Publication Date
EP1389284A2 true EP1389284A2 (en) 2004-02-18
EP1389284B1 EP1389284B1 (en) 2008-07-30

Family

ID=7687234

Family Applications (1)

Application Number Title Priority Date Filing Date
EP02716833A Expired - Lifetime EP1389284B1 (en) 2001-05-22 2002-03-14 Safety switching module for testing the switching-off ability of a switching element in a safety switching module

Country Status (8)

Country Link
US (1) US7187091B2 (en)
EP (1) EP1389284B1 (en)
JP (1) JP4191494B2 (en)
AT (1) ATE403106T1 (en)
AU (1) AU2002247759A1 (en)
DE (1) DE10127233C1 (en)
ES (1) ES2311596T3 (en)
WO (1) WO2002095282A2 (en)

Families Citing this family (36)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE10216226A1 (en) * 2002-04-08 2003-10-30 Pilz Gmbh & Co Device for fail-safe switching off of an electrical consumer, especially in industrial production plants
US7193379B2 (en) 2003-10-20 2007-03-20 Wabtec Holding Corp. Electronic circuit arrangement for switching an electrical load in a fail safe manner
ES2342543T3 (en) * 2004-04-19 2010-07-08 PILZ GMBH & CO. KG SIGNALING DEVICE FOR A SAFETY CIRCUIT.
GB2429347B (en) * 2005-04-01 2007-08-08 Westinghouse Airbrake Technolo Electronic circuit arrangement for switching an electrical load in a fail safe manner
CN102176114B (en) * 2005-08-02 2013-06-05 菲尼克斯电气公司 Measuring device and method of measuring cyclic analog signal
DE102006061476B3 (en) * 2006-12-23 2008-06-26 Berger Lahr Gmbh & Co. Kg Electric control
US20090050453A1 (en) * 2007-08-23 2009-02-26 Honeywell International Inc. Explosion proof safety switch apparatus
DE102009017275B4 (en) 2009-04-11 2014-01-09 Festo Ag & Co. Kg Device for monitoring the switching capability of at least one semiconductor switch serving to connect an electrical load
DE102010004524B4 (en) * 2010-01-14 2017-01-19 Festo Ag & Co. Kg Device for electrical circuit monitoring
DE102010007784A1 (en) 2010-02-12 2011-08-18 FESTO AG & Co. KG, 73734 Device for electrical circuit monitoring
DE102011086756A1 (en) * 2010-11-23 2012-05-24 Continental Teves Ag & Co. Ohg Method for fault detection of a control switch for triggering a vehicle function of a vehicle and control switch for performing the method
EP2461342B1 (en) * 2010-12-06 2015-01-28 Siemens Aktiengesellschaft Error-proof switching module
GB2486493B (en) * 2010-12-17 2016-06-15 Ge Aviat Systems Ltd Switching circuits and methods of testing
JP5546524B2 (en) * 2011-12-06 2014-07-09 オムロンオートモーティブエレクトロニクス株式会社 Vehicle starter motor drive circuit
US8836338B2 (en) 2011-12-16 2014-09-16 Ge Aviation Systems Limited Switching circuits and methods of testing thereof
US9628065B2 (en) * 2012-10-05 2017-04-18 Fisher-Rosemount Systems, Inc. Safety instrumented process control apparatus and methods
DE102012111070B4 (en) * 2012-11-16 2015-02-19 Phoenix Contact Gmbh & Co. Kg Safety-related device for safe switching of an electrical load
EP2800118B1 (en) * 2013-04-29 2016-12-28 Rockwell Automation Germany GmbH & Co. KG Auto detection of guard locking device
DE202013007990U1 (en) * 2013-09-11 2013-10-09 Bürkert Werke GmbH Electromagnetic actuator for a solenoid valve, valve terminal with at least one solenoid valve and module assembly
ITFI20130242A1 (en) * 2013-10-16 2015-04-17 Microtest S R L A RELAY DEVICE IMPROVEMENT FOR OPENING AND CLOSING A CIRCUIT
DE102013112488A1 (en) * 2013-11-13 2015-05-13 Pilz Gmbh & Co. Kg Safety controller with configurable inputs
CN105229885B (en) 2014-03-17 2017-06-09 三菱电机株式会社 Power supply control device and programmable logic controller (PLC)
DE102015203252A1 (en) * 2015-02-24 2016-08-25 Zf Friedrichshafen Ag Safety device and method for transferring an actuator system to a safe state, actuator system and method for operating an actuator system
DE102015104211A1 (en) 2015-03-20 2016-09-22 Pilz Gmbh & Co. Kg Safety switching device for fail-safe disconnection of an electrical load
DE202015103339U1 (en) 2015-06-25 2016-09-30 Weidmüller Interface GmbH & Co. KG Circuit arrangement for a secure digital switching output
US10245802B2 (en) * 2015-07-28 2019-04-02 Toyota Motor Engineering & Manufacturing North America, Inc. Die compatibility adaptor for machine press communication
DE102015222990A1 (en) * 2015-11-20 2017-05-24 Zf Friedrichshafen Ag Safe control of a consumer
US10360790B2 (en) 2016-04-22 2019-07-23 Banner Engineering Corp. Safety touch button system having an intercommunications link
DE102016109915A1 (en) 2016-05-30 2017-11-30 Pilz Gmbh & Co. Kg Device for fail-safe shutdown of a consumer
DE202016006083U1 (en) * 2016-09-30 2018-01-03 WAGO Verwaltungsgesellschaft mit beschränkter Haftung Parallel-connected semiconductor switches for redundant power supply and interruption
DE102016122370A1 (en) * 2016-11-21 2018-05-24 Pilz Gmbh & Co. Kg Emergency command device and safety device with an emergency command device
EP3462471B1 (en) * 2017-09-29 2022-04-13 Rockwell Automation Switzerland GmbH Safety switch
DE102018200120A1 (en) * 2018-01-05 2019-07-11 Kuka Deutschland Gmbh Safety control with at least one semiconductor switching contact
DE102018114781A1 (en) 2018-06-20 2019-12-24 Pilz Gmbh & Co. Kg Circuit arrangement for switching an electrical load and method for checking a status of a safety output of a circuit arrangement
PL237078B1 (en) * 2018-12-18 2021-03-08 Mdj Electronic Spolka Z Ograniczona Odpowiedzialnoscia Intrinsically safe electronic safety relay
SE544824C2 (en) * 2021-04-16 2022-12-06 Bombardier Transp Gmbh Digital output module

Family Cites Families (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE3732079A1 (en) * 1987-09-24 1989-04-06 Vdo Schindling Method and device for operating a bridging circuit for at least one mechanical switching contact within a circuit arrangement which carries out a safety function
DE4224620C1 (en) * 1992-07-25 1994-03-17 Pilz Gmbh & Co Mains-isolated three=phase asynchronous rotary electrical machine speed monitor e.g. for door - has two=channel processing circuits for delivering bit signals to coupling circuit, which generates output signal when speed is above or below limits, if bit signal changes from rest to active within time window
SE470530B (en) * 1992-11-16 1994-07-04 Ericsson Telefon Ab L M limiter
EP0775332B1 (en) * 1995-03-11 2000-05-10 Leuze electronic GmbH + Co. Safety switch arrangement
DE69523752T2 (en) * 1995-08-31 2002-08-29 St Microelectronics Srl Method and circuit for pulse width modulated control of a bridge and a plate drive and using the same
US5933304A (en) * 1998-04-28 1999-08-03 Carlingswitch, Inc. Apparatus and method of interrupting current for reductions in arcing of the switch contacts
FR2791144B1 (en) * 1999-03-19 2001-11-30 Sextant Avionique DEVICE FOR MONITORING THE CIRCULATION OF A SUBSTANTIALLY CONTINUOUS CURRENT IN A LOAD AND METHOD FOR IMPLEMENTING SAID DEVICE
DE19941022A1 (en) * 1999-08-28 2001-03-01 Gestra Gmbh Control unit for thermal systems
DE10011211B4 (en) 2000-03-08 2004-08-05 Pilz Gmbh & Co. Safety relay and safety relay system

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
See references of WO02095282A2 *

Also Published As

Publication number Publication date
ATE403106T1 (en) 2008-08-15
WO2002095282A3 (en) 2003-11-20
JP4191494B2 (en) 2008-12-03
WO2002095282A2 (en) 2002-11-28
US20040160131A1 (en) 2004-08-19
DE10127233C1 (en) 2002-11-28
AU2002247759A1 (en) 2002-12-03
JP2005501200A (en) 2005-01-13
ES2311596T3 (en) 2009-02-16
US7187091B2 (en) 2007-03-06
EP1389284B1 (en) 2008-07-30

Similar Documents

Publication Publication Date Title
EP1389284B1 (en) Safety switching module for testing the switching-off ability of a switching element in a safety switching module
EP1262021B2 (en) Security switching device and a system of security switching devices
EP1869687B1 (en) Safety switch for the safe disconnection of an electric consumer
EP1269274B2 (en) Safety switching unit and method for setting an operational mode of a safety switching unit
EP2980659B1 (en) Device and method for monitoring and switching a load circuit
EP2149826B1 (en) Safety switching arrangement for outputting a switching signal
DE102006030448B4 (en) Safe output circuit with a single-channel peripheral connection for the output of a bus participant
EP3460593B1 (en) Secure switching device
DE112014002062B4 (en) Power supply control device and programmable logic controller
DE10149234B4 (en) Fuse-protected shunt regulator and method for protecting a slave shot controller
EP1364459A2 (en) Safety switch device
DE19606894A1 (en) Electronic circuit stage for safe control and monitoring of electrical loads in railway applications
DE2143375B1 (en) Electronic memory element for digital data processing systems with a high level of error security, in particular for railway safety
EP1134715B1 (en) Lamp circuit for a signalisation device of a traffic signal system
DE3623470C2 (en)
DE3926990C2 (en) Network switching facility
EP3208922A1 (en) Module self-check in a modular multicell converter
DE102009035166A1 (en) Method for operating an electrical energy supply network
WO2011107376A1 (en) Circuit arrangement for measuring voltage in an electric drive, in particular a point mechanism
DE1463398C (en) Arrangement for signal conversion and error monitoring for two-channel controls
DE3801875C2 (en)
CH600424A5 (en) Amplifier cct. for binary signals in railway signalling
DE2442874A1 (en) Amplifier cct. for binary signals in railway signalling - forms comparator with comparator chain and external transformer
DE2507868B2 (en) Monitoring device for several power units working in parallel
DD240088A1 (en) CIRCUIT ARRANGEMENT FOR MONITORING POTENTIALLY SEPARATED SOURCES OF VOLTAGE FAILURE

Legal Events

Date Code Title Description
PUAI Public reference made under article 153(3) epc to a published international application that has entered the european phase

Free format text: ORIGINAL CODE: 0009012

17P Request for examination filed

Effective date: 20031125

AK Designated contracting states

Kind code of ref document: A2

Designated state(s): AT BE CH CY DE DK ES FI FR GB GR IE IT LI LU MC NL PT SE TR

AX Request for extension of the european patent

Extension state: AL LT LV MK RO SI

17Q First examination report despatched

Effective date: 20050215

GRAP Despatch of communication of intention to grant a patent

Free format text: ORIGINAL CODE: EPIDOSNIGR1

RTI1 Title (correction)

Free format text: SAFETY SWITCHING MODULE FOR TESTING THE SWITCHING-OFF ABILITY OF A SWITCHING ELEMENT IN A SAFETY SWITCHING MODULE

RAP1 Party data changed (applicant data changed or rights of an application transferred)

Owner name: PILZ GMBH & CO.

GRAS Grant fee paid

Free format text: ORIGINAL CODE: EPIDOSNIGR3

RBV Designated contracting states (corrected)

Designated state(s): AT BE CH CY DK ES FI FR GB GR IE IT LI LU MC NL PT SE TR

GRAA (expected) grant

Free format text: ORIGINAL CODE: 0009210

AK Designated contracting states

Kind code of ref document: B1

Designated state(s): AT BE CH CY DK ES FI FR GB GR IE IT LI LU MC NL PT SE TR

REG Reference to a national code

Ref country code: GB

Ref legal event code: FG4D

Free format text: NOT ENGLISH

REG Reference to a national code

Ref country code: CH

Ref legal event code: NV

Representative=s name: TROESCH SCHEIDEGGER WERNER AG

Ref country code: CH

Ref legal event code: EP

REG Reference to a national code

Ref country code: DE

Ref legal event code: 8566

REG Reference to a national code

Ref country code: IE

Ref legal event code: FG4D

Free format text: LANGUAGE OF EP DOCUMENT: GERMAN

REG Reference to a national code

Ref country code: SE

Ref legal event code: TRGR

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: PT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20081230

Ref country code: NL

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20080730

REG Reference to a national code

Ref country code: ES

Ref legal event code: FG2A

Ref document number: 2311596

Country of ref document: ES

Kind code of ref document: T3

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: FI

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20080730

REG Reference to a national code

Ref country code: IE

Ref legal event code: FD4D

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: IE

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20080730

Ref country code: DK

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20080730

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: ES

Payment date: 20090324

Year of fee payment: 8

PLBI Opposition filed

Free format text: ORIGINAL CODE: 0009260

PLAX Notice of opposition and request to file observation + time limit sent

Free format text: ORIGINAL CODE: EPIDOSNOBS2

26 Opposition filed

Opponent name: EUCHNER GMBH + CO. KG

Effective date: 20090429

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: GB

Payment date: 20090325

Year of fee payment: 8

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: SE

Payment date: 20090312

Year of fee payment: 8

BERE Be: lapsed

Owner name: PILZ G.M.B.H. & CO.

Effective date: 20090331

PLAF Information modified related to communication of a notice of opposition and request to file observations + time limit

Free format text: ORIGINAL CODE: EPIDOSCOBS2

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: MC

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20090331

PLBB Reply of patent proprietor to notice(s) of opposition received

Free format text: ORIGINAL CODE: EPIDOSNOBS3

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: BE

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20090331

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: AT

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20090314

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: GR

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20081031

EUG Se: european patent has lapsed
GBPC Gb: european patent ceased through non-payment of renewal fee

Effective date: 20100314

PLCK Communication despatched that opposition was rejected

Free format text: ORIGINAL CODE: EPIDOSNREJ1

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: GB

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20100314

APAH Appeal reference modified

Free format text: ORIGINAL CODE: EPIDOSCREFNO

APBM Appeal reference recorded

Free format text: ORIGINAL CODE: EPIDOSNREFNO

APBP Date of receipt of notice of appeal recorded

Free format text: ORIGINAL CODE: EPIDOSNNOA2O

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: LU

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20090314

APBQ Date of receipt of statement of grounds of appeal recorded

Free format text: ORIGINAL CODE: EPIDOSNNOA3O

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: TR

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20080730

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: CY

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20080730

REG Reference to a national code

Ref country code: ES

Ref legal event code: FD2A

Effective date: 20111118

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: ES

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20100315

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: SE

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20100315

PLAB Opposition data, opponent's data or that of the opponent's representative modified

Free format text: ORIGINAL CODE: 0009299OPPO

R26 Opposition filed (corrected)

Opponent name: EUCHNER GMBH + CO. KG

Effective date: 20090429

APAH Appeal reference modified

Free format text: ORIGINAL CODE: EPIDOSCREFNO

APBU Appeal procedure closed

Free format text: ORIGINAL CODE: EPIDOSNNOA9O

REG Reference to a national code

Ref country code: FR

Ref legal event code: PLFP

Year of fee payment: 15

PLBN Opposition rejected

Free format text: ORIGINAL CODE: 0009273

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: OPPOSITION REJECTED

27O Opposition rejected

Effective date: 20151125

REG Reference to a national code

Ref country code: FR

Ref legal event code: PLFP

Year of fee payment: 16

REG Reference to a national code

Ref country code: FR

Ref legal event code: PLFP

Year of fee payment: 17

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: DE

Payment date: 20190321

Year of fee payment: 18

Ref country code: CH

Payment date: 20190320

Year of fee payment: 18

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: IT

Payment date: 20200318

Year of fee payment: 19

REG Reference to a national code

Ref country code: CH

Ref legal event code: PL

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: FR

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20200331

Ref country code: CH

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20200331

Ref country code: LI

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20200331

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: IT

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20210314